BugTestLab

Information Security Enthusiast, Bug Bounty Hunter, YouTuber in free time

[BugTestLab @bugtestlab]

Its been 3months I reported this but No reponse at all...
@bitbns @gauravdahake @SupportBitbns @bitbns

#bugbounty #bugbountytips #bugbountytip #infosec

https://t.co/T6AJwIJxK5

[BugTestLab @bugtestlab]

Have fun #infosec #nmap #Hollywood

YouTube: https://t.co/MwfPxVHKAp

[BugTestLab @bugtestlab]

Got another CVE for finding Reflected #XSS in WebEx Meeting. CVE-2020-3463 . Check the video for detailed analysis of POST based Reflected XSS.

#bugbounty #bugbountytip #bugbountytips

https://t.co/RNqq6MKlj3

[Sean Metcalf @PyroTek3]

In case you weren't aware, #defconsafemode is free to attend & no registration is required.
https://t.co/PjSN8wGXo6

[Aous Hossam Aldeen 🇷🇺 @Aous_Ho]

Top 25 Remote Code Execution (RCE) Parameters

#bugbountytips #bugbountytip #bugbounty

[BugTestLab @bugtestlab]

@Jhaddix Happy Birthday 🎂🎂🎂 many many happy returns of the day 🎉🎉���🎂

[BugTestLab @bugtestlab]

Server Side Template Injection (#SSTI ) to #RCE to #shell

#ctf #ctf2020 #BugBounty #bugbountytips

Link: https://t.co/ulYfoB0xOw

[Abhijit Mali 🇮🇳 @abhiimali]

Heyaaa Family !!
We learn a lot from disclosed reports. Here

XSS

https://t.co/NzqIepEfiO

RCE 😍

https://t.co/UW0ciG1CnH

Race Condition

https://t.co/QTjKdaVb4p

IDOR

https://t.co/ayXut9TnnU

Happy Hacking 🤩🔥
Credit: Internet
#bugbounty
#bugbountytips

[BugTestLab @bugtestlab]

Thank you all #1000subscribers in #YouTubeChannel . Content for upcoming videos:

1. Recent #exploitation PoC
2. PoC for #bugbounty #bugbountytips
3. #CTF Solutions
4. #infosec Tutorials & attack

Please #subscribenow if you have interest :)

Link: https://t.co/jpNdrjpjgt

[BugTestLab @bugtestlab]

Got a new CVE.. CVE-2020-3345 . HTML Injection on Cisco WebEx meetings . Video demonstration shows that how an attacker setup netcat and ngrok to exploit victim over the internet.

#bugbountytips #bugbountytip #bugbounty #infosec #Cisco #ciscosecurity

https://t.co/C35U0nVWph

[nyrbte @nyrbte]

▶ Hostile subdomain takeovers

- https://t.co/zIiFFZbJXR
- https://t.co/U1JzlvBQV3
- https://t.co/PWoimv1Et6
- https://t.co/6EWmDDoYEA

▶ CORS misconfigurations

- https://t.co/2JKPEP6q0Z
- https://t.co/h03Bb6QVPc

#bugbountytips #bugbountytip #bugbounty #cybersecurity #infosec

[BugTestLab @bugtestlab]

Made a small video on how CVE-2020-5902 can be exploited in the wild using NMAP script: https://t.co/cCN5Qqd4XO

#infosec

[Aditya @ADITYASHENDE17]

SSRF payloads
http://[::]:80/
http://[::]:25/ SMTP
http://[::]:22/ SSH
http://[::]:3128/
http://0000::1:80/
http://0000::1:25/ SMTP
http://0000::1:22/ SSH
http://0000::1:3128/
http://0177.0.0.1/
http://2130706433/ = http://127.0.0.1
http://3232235521/ http://192.168.0.1
#kongsec

[Florian Hansemann @CyberWarship]

DomLink — Automating domain discovery

#infosec #pentest #bugbounty
https://t.co/iHoiR7xdPo

[BugTestLab @bugtestlab]

@chadwik66 I have registered only micro focus website. But it seems they will provide the code shortly. I sent a mail to them. They just confirmed. Though I am sharing this.

[francesc @francesc]

HTTP status codes as emoji .. this might be a good idea?

- 200 👍
- 201 🆕
- 301 👉
- 400 👎
- 401 🔒
- 402 💰
- 403 🚫
- 404 🤷‍♂️
- 408 ⌛️
- 410 💨
- 418 🍵
- 500 💩

[Rishiraj Sharma @ehrishiraj]

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers.

https://t.co/0xp0EuorfJ

#infosec #bugbountytips #Pentesting

[BugTestLab @bugtestlab]

Crack ANY WiFi using a simple python script

#infosec
#cybersecurity
#wireless
#blackhat
#EthicalHacking

YouTube: https://t.co/KpTdGwRS5g

[Binni Shah @binitamshah]

OSCE Exam Practice - Part I (Lab Setup) : https://t.co/0TEDvEjlb6

2 : https://t.co/tyPd32XzII

3 : https://t.co/oPtfGLVLXe

4 : https://t.co/ssPtfg8bmK

5 : https://t.co/05tH7BpVNh cc @epi052

[Salah Bentayeb @bentayebxsalah]

From The Web Application Hacker's Handbook
#securiteinformatique #ethical_hacking #webmaster #developpementweb #developpeur #pentest #security #cybersecurite #DevOps #Web #BugBounty